This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          XVeIPqjbsel6MkmNgNyj9wspYm3vBBxCTuINcU1/kYs=
Subject key identifier:   78:07:0D:DD:DA:89:B4:FF:61:2E:88:E5:D5:B0:55:6D:84:84:8F:A2
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       019B2C669F936DD10029D60BC48910CF8B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          1368
Signing time:             Wed 17 Dec 2025 13:01:21 +0000
Manifest this update:     Wed 17 Dec 2025 13:01:21 +0000
Manifest next update:     Thu 18 Dec 2025 13:01:21 +0000
Files and hashes:         1: BUih8qlxlM36nVLgODl8U2c6gUs.roa (hash: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=)
                          2: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: wWtgL1/t4KEuwTrMET6cTDTbL0gbQjbn7GFIEQ2t804=)
                          3: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (hash: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:66:9f:93:6d:d1:00:29:d6:0b:c4:89:10:cf:8b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: Dec 17 13:01:21 2025 GMT
            Not After : Dec 18 13:01:21 2025 GMT
        Subject: CN=78070dddda89b4ff612e88e5d5b0556d84848fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:bf:5a:eb:01:8c:56:92:24:17:eb:93:42:
                    f9:1a:a7:74:c5:07:b6:a1:18:bb:41:ac:25:5e:41:
                    2b:ba:61:07:e2:6b:4e:28:49:ad:b7:df:6c:94:a3:
                    1e:ab:9a:d7:bf:24:95:a9:3b:f5:5a:fb:45:20:30:
                    93:dc:5f:d3:7d:4c:2b:bd:eb:0d:9b:54:9e:c0:44:
                    24:c1:a3:7d:ee:5e:28:8d:42:8d:33:73:20:0d:b3:
                    c3:a4:99:7e:22:91:2f:86:af:82:86:a5:73:5f:2e:
                    db:81:6b:08:c0:f2:e8:2b:72:08:bc:ad:af:61:51:
                    9a:fe:d9:fd:21:a1:fc:9e:44:89:88:24:23:dd:ff:
                    47:b6:1f:c9:52:d9:23:40:bf:a0:ac:7b:1a:5a:0f:
                    41:af:43:de:81:d4:ae:49:15:1b:0f:b4:67:15:52:
                    f5:1e:03:2b:5d:a7:03:4e:19:12:24:10:a3:41:ca:
                    37:4e:ae:d1:95:09:e1:ba:8b:a1:da:9c:e5:3b:e2:
                    12:cc:3d:35:bf:3b:c9:08:41:72:1f:b5:bc:e6:99:
                    e6:cc:a3:8e:54:e5:9d:2c:5c:5c:ec:34:93:55:57:
                    f6:35:53:65:29:5c:17:a3:70:e9:35:0b:92:f5:1c:
                    5a:c4:4f:b1:95:b6:08:c3:c3:92:09:0b:08:9d:42:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:07:0D:DD:DA:89:B4:FF:61:2E:88:E5:D5:B0:55:6D:84:84:8F:A2
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:f5:81:20:ee:a7:8c:47:f4:28:d4:57:3b:cc:a9:0b:bb:
         64:79:6d:96:81:d4:25:3b:61:e1:e7:a9:00:2d:7e:09:53:1e:
         53:f5:cb:a7:40:34:84:cf:3b:f3:1c:f8:3c:c6:a6:55:09:95:
         7d:ad:25:5b:ce:f5:6c:cc:de:ad:33:a7:71:cd:c3:7d:46:f0:
         98:3a:38:c1:87:db:5e:0b:b5:fd:7a:c6:60:b4:e8:c7:07:17:
         ff:87:34:6a:fe:b7:a3:d5:05:62:c9:c3:a4:18:a9:34:19:0f:
         44:7d:da:46:da:0d:9b:3a:8d:25:f5:e3:9e:67:49:28:a5:ce:
         38:f1:fa:d6:8e:87:1f:ca:2c:5a:b4:37:0a:c0:c5:89:78:ee:
         65:29:59:21:fd:01:23:72:f4:c7:95:e4:b0:8f:36:e4:6e:e9:
         92:07:27:ce:f1:5d:91:78:73:1d:b7:ff:d3:e5:89:e3:80:3e:
         1d:ed:4d:9d:4f:4c:12:8b:45:dd:2a:b7:b9:9f:8e:df:b8:4b:
         63:d8:d2:8d:bc:7a:51:46:3b:ba:e7:b8:13:a1:46:d3:b7:bd:
         1a:e1:98:67:d9:71:47:9f:53:1b:b3:5d:c6:5e:c0:a0:fd:45:
         79:f7:63:33:8d:b4:24:f5:c7:ee:ca:d3:23:83:b7:16:bc:91:
         f9:3c:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:15:55 2025 by rpki-client